[WIP] PROD-615-proxy-enablement

[bmcelvee]

https://jira.coreos.com/browse/OSDOCS-468

[openshift-docs-preview-bot]

The preview will be available shortly at:

• https://PROD-615-proxy-enablement--ocpdocs.netlify.com/

[danehans]

@bmcelvee currently enable-cluster-wide-proxy.adoc provides guidance on how to modify a cluster to enable proxy, but not how to create a cluster with proxy enabled. Do you mind using some of the references I provided here to expand enable-cluster-wide-proxy.adoc or create a new doc that provides the steps for creating a new cluster with proxy enabled?

[kalexand-rh]

I think we'll need a separate assembly to cover the installation with proxy piece. @bmcelvee, I might have time to make that next week.

[danehans]

I think it would be beneficial to add a proxy section under networking that leverages the details of this doc. I think it's important for people to understand what the controllers do, which operator runs the controller, how the CA injection stuff works, etc..

[danehans]

Please change so the doc is not referencing our test proxy.

[danehans]

Please change so the doc is not referencing our test proxy.

[danehans]

Please change so the doc is not referencing our test proxy.

[danehans]

Please change so the doc is not referencing our test proxy.

[danehans]

@bmcelvee due to https://bugzilla.redhat.com/show_bug.cgi?id=1743174, a docs note is needed stating: The install config machineCIDR directive is used to bypass proxy for internal cluster connections. For deployments such as bare-metal that do not use machineCIDR, one of the following steps should be completed for proxy to function properly:

1. Cluster node IP's should be assigned from machineCIDR.
2. machineCIDR should be updated to reflect the CIDR being used for cluster nodes
3. Add cluster node IPs or CIDR to noProxy of proxy "cluster".

This might be a good place for the docs note. However, the example install config provided does not include a machineCIDR. Here is my install-config:

$ cat latest-proxy/install-config.yaml 
apiVersion: v1
baseDomain: devcluster.openshift.com
compute:
- hyperthreading: Enabled
  name: worker
  platform: {}
  replicas: 3
controlPlane:
  hyperthreading: Enabled
  name: master
  platform: {}
  replicas: 3
metadata:
  creationTimestamp: null
  name: latest-proxy
networking:
  clusterNetwork:
  - cidr: 10.128.0.0/14
    hostPrefix: 23
  machineCIDR: 10.0.0.0/16
  networkType: OpenShiftSDN
  serviceNetwork:
  - 172.30.0.0/16
platform:
  aws:
    region: us-west-2
pullSecret: <PULL_SECRET>
sshKey: |
  ssh-rsa <SSH_KEY>

[bergerhoffer]

Closing this PR in favor of #16562.